The Rix4Web Portal is vulnerable to blind SQL injection. This can be exploited by injecting malicious SQL queries into the 'dir_link' parameter. An attacker can execute arbitrary SQL commands and retrieve sensitive information from the database.
When you install script as first time, it will be generate file log & if we enter here for example :http://127.0.0.1/akcms4.2.4/logs/we see two files log:1- for config log e.g. :20120910.log2- for failed login e.g. :admin20120910.logif we see first file, we see the name of file as the date when install script, but if we enter the folder and permission of index is on, we can read it ..or we can brute force of that file by some programmer found in google or you can generate simple script for yourself ..# P.O.C :http://127.0.0.1/akcms4.2.4/logs/20120910.logyou will see the information of config like this for example :16:57:56 127.0.0.1 file=install $dbtype = 'mysql';$dbhost = 'localhost';$dbuser = 'root';$dbpw = '000000';$dbname = 'ak';$tablepre = 'ak';$charset = 'utf8';$timedifference = '0';$template_path = 'ak';$codekey = 'snGrZU';$cookiepre = '9x5G74';
The phpMyChat Plus v1.94 RC1 is vulnerable to Remote Blind SQL Injection, Remote File Inclusion, Local File Inclusion, and XSS. For Remote Blind SQL Injection, an attacker can use some automatic blind SQL injection to get database information. For Remote File Inclusion, the allow_url_include must be set to On. For Local File Inclusion, the magic_quotes_gpc must be set to Off. For XSS, an attacker must have a good brain.
Manhali v1.8 is vulnerable to Local File Inclusion vulnerability. An attacker can exploit this vulnerability to include a remote file containing malicious code, resulting in arbitrary code execution on the vulnerable server. The vulnerability exists due to insufficient sanitization of user-supplied input to the 'f' parameter in the 'download.php' script. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing directory traversal characters (e.g. '../') to the vulnerable script. This may allow the attacker to include a remote file containing malicious code, resulting in arbitrary code execution on the vulnerable server.
LuxCal v2.7.0 is vulnerable to multiple remote vulnerabilities, including Local File Inclusion, Information Disclosure, XSS, and phpinfo(). The Local File Inclusion vulnerability can be exploited by sending a specially crafted HTTP request containing directory traversal characters (e.g. “../”) to the vulnerable application. This will allow an attacker to download the source code of the application. The Information Disclosure vulnerability can be exploited by sending a specially crafted HTTP request to the vulnerable application. This will allow an attacker to view the encrypted information of the database. The XSS vulnerability can be exploited by sending a specially crafted HTTP request containing malicious JavaScript code to the vulnerable application. This will allow an attacker to execute arbitrary JavaScript code in the context of the vulnerable application. The phpinfo() vulnerability can be exploited by sending a specially crafted HTTP request to the vulnerable application. This will allow an attacker to view the configuration information of the application.
SiteGo is vulnerable to a Remote File Inclusion vulnerability. This vulnerability exists in two styles (get_templet.php) on line 120, where the application includes a file without proper validation. An attacker can exploit this vulnerability by sending a malicious URL in the MyStyle[StylePath] parameter. For example, http://127.0.0.1/site-go/style/green/get_templet.php?MyStyle[StylePath]=http://127.0.0.1/shell.txt? or http://127.0.0.1/site-go/style/blue/get_templet.php?MyStyle[StylePath]=http://127.0.0.1/shell.txt?. This can allow an attacker to execute arbitrary code on the vulnerable system.
Support4Arabs Pages v2.0 is vulnerable to a Remote SQL Error Based Injection vulnerability. This vulnerability is due to the lack of proper sanitization of user-supplied input in the 'id' parameter of the 'pages.php', 'categories.php' and 'news.php' scripts. An attacker can exploit this vulnerability to inject malicious SQL queries and gain access to the database. The attacker can also use this vulnerability to gain access to sensitive information such as usernames and passwords stored in the database.
ProQuiz v2.0.2 is vulnerable to Remote File Include, Local File Include, Remote SQL Injection & Blind SQL Injection. In File (my_account.php) in line 114 & 115, if($_GET['action']=='getpage' && !empty($_GET['page'])){@include_once($_GET['page'].'.php'); is vulnerable to Remote File Include & Local File Include. For Remote File Include, an attacker can register and login in the panel and paste the malicious URL. For Local File Include, an attacker can register and login in the panel and paste the malicious URL. For Remote SQL Injection & Blind SQL Injection, in two files, answers.php in line 55 and functions.php in $_POST['email'] and $_POST['username'], an attacker can inject malicious SQL code in the URL and POST method.
Services By CQR